APPENDIX A - TABLES 



Task ID 


Ti 


Cb,i 




6 


1 


x 2 


7 


1 


X3 


21 


2 



Table (1) - Periodic Task Set 



Notation 




Description 



The task in a process with priority level t. In traditional RMA, is a single thread and 
the whole system is a single partition. In DEOS, we call n an aggregate thread. There 
are many threads running at the same rate in DEOS. So, if ii,i,it\3» — aie all the 
threads defined for rate i } r, is the sequence of these threads when run back-to-back. This 
representation allows us to consider slack only in terms of rates and not in terms of threads 
which potentially helps performance significantly, ( 

The number of distinct (aggregate) threads allowed in the system. This number is fixed 
at system power up. 

The time between dispatches of r*. We assume without loss of generality that 
Ti < T 2 < ... < T„. Ti is also called the period of n. In DEOS, strict inequal- 
ity holds. 

The hyperperiod of the task set. H = lcra(2i, T 2 , ...T ft ). Note that in a harmonic system 
such as DEOS, tf = T n . 

The j th dispatch of r». Again, in DEOS, ry is an aggregate thread. 
The worst case execution time for ry . In classical RMS the task set is fixed so Cy = Ci for 



Note that this quantity is computed at each successful 



each dispatch j where j 
schedulability test. 

A short hand notation for Cy when Cy = C»* for all j,k£ {!,..., 



Table (2) - Periodic Thread Specification in Classical RMS 



Description 



The value ^ for * > j. ni/j is the number of times t 3 will execute during one period 
denned by T*. For a harmonic system, all n»/> are integers* 

The level i slack in the interval [Q,j • T$ assuming; all periodic processes take their worst 
case execution time to complete. 

The dispatch identifier of the next instance of n to complete. If n is in state Completed- 
ForltsPeriod, this is the next instance, otherwise it is the current instance. This value must 
be maintained at runtime. When aggregate threads are supported, one state variable per 
thread may be necessary. 

The amount of level t or higher aperiodic time that has been consumed since the beginning 
of the hyperperiod. This includes all time consumed by aperiodic task of priority 1 
where periodic process overrun can be considered aperiodic process computation time* 
There is an implicit time argument, so ApertodUoTiWie/ L ~ /^eriocXtcTRme^Ct)* 
level i idle time that has occurred since the beginning of the hyperperiod. This is all the 
time not spent processing tasks of priority i or higher. In other words, it is all the time 
spent* processing tasks (periodic, aperiodic or, idle) of priority i + 1, «..,n, n + 1 where n is 
the number of rates in the system, and level n + 1 is the idle process. There is an implicit 
tune argument, so 

The dispatch identifier of 7\, or equivalently the period identifier of Ti. There is an implicit 
time argument, so 7;(f) = -y*. 

The amount of level i — 1 slack available in [0, j • Ti] which is the amount of time available 
for processing tasks at level i - 1 without causing n , r 2 , ... , n to miss any of their deadlines 
in that interval. 



Table (3) - Slack Scheduling Specification in the Context of Classical RMS 



Dispatch ID 


1 


2 


3 


4 


5 


6 


7 


Timeline 


5 


10 


15 


20 


25 


30 


35 


Slack y 


4 


9 


14 


19 


24 


29 






12 


25 













Table (4) - Timeline Slack 



Dispatch ID 


1 


2 


3 


4 


5 


6 


TimelineSlack(l,30) 


4 


8 


12 


16 


20 


24 


TimelineSlack(2,30) 


6 


12 


18 








TimelineSlack(3,30) 


10 













Table (5) - TimelincSlacky 



Thread Servics 



Description 



createThread 
startThread 

startThreads 



restartThread 
IcillThread 

stopThread 

waitU nti 1 NextPeriod 



restartProcess 

createMutex 

lockMutex 

unlockMutex 

resetMutex 

waitForEvent 
pulseEvent 



Creates a new thread. If the thread is dynamic, it also starts the thread. 

Schedules to have the (static) thread started at the beginning of the next period defined 
by the threads rate, after the start service has completed. 

Schedules to have the set of threads started at the beginning of each of their respective 
periods defined by their rates, after the start threads service has completed. 

An active thread is restarted from the beginning. 

An active dynamic thread is deactivated. A stopped static thread is also deactivated. 

This routine is newly added* Static threads must first be stopped before they can be lolled. 
The calling thread is suspended until the start of its next period where it resumes execution. 
Other threads queued at a mutex that the calling thread holds will be dequeued. 

All the process' threads, mutexes and events are killed. The process 5 PRIMARY THREAD is 
restarted. 

Creates a mutex that can be accessed by multiple threads in the calling threads process. 

The calling thread is granted the lock if the mutex is unlocked and queues if waitok is sc 
true. 

A thread releases its lock on a mutex and the lock is granted to the highest priority thread 
(if any) waiting. 

All threads queued at the mutex are dequeued (including an executing thread). 
The calling thread is suspended until the event is pulsed. 

All threads currently waiting for the pulsed event will transition from state suspended to 
state ready. __ — 



Table (6) - Thread Services 



Notation 



Description 



n 
n 

*ij 
Ti 

mi(t) 

m t 
Ci 

my 



z 

c 

U B 



The aggregate of threads with priority level t. We call n an aggregate thread. 

The number of distinct rates allowed in .the system. This number is fixed between 

coldstarts. 

The j th thread of priority level i. Even though there is no explicit ordering of threads 
within a priority level, it is convenient to do so for the sake of reference. 
The time between dispatches of n. We assume without loss of generality that 
Ti < T 2 < ... < Tn. 

The period identifier. At time t where t € [0, IF], = t» ~ H?!* 

The number of active threads forming n at time t. For ease of exposition, the t is often 
omitted and refers to the current period of Ti so mi(i) — m,. Note that there is a time 
lag between thread creation and thread activation, 

A temporary value for m; when threads will but have not yet become (de) activated. 
The worst case budget times summed over all threads forming ry. 

The value ^ for i > j. is the number of times Tj will execute during one period 
defined by T». 

The primary budget of process Jb, Jb 6 {1 3 P = number of active processes. Note that 

a process can be active and have its primary thread stopped, in which case some portion 
of its budget is available as timeline slack. This is poor notation actually since the set of 
active processes changes. 

The set of all processes whose unallocated primary budgets are available for slack. 
The sum of the with budgets available for slack. C = J2kez 

System level utilization reserved for blocking times. A feasibility test is always of the form 
U<1-U B . 



Table (7) - Periodic Thread Notation 



Notation 



StacfcO 

A 

AA,*j 



Ei 



Aperiodic 
Twaeft) 

Idlest) 



Description 



is the amount of timeline slack that was made available from processes with inactive 
primary thread budgets with rate i at time ji(i)Ti. Note: Ai is not cumulative since the 
beginning of the hyperperiod. Also, in the current release of DEOSj it is always true that 
Ay = 0fori€{2,... J n}, 

The vector (Ai, A2,..., A n ) which is maintained at run-time. 

The amount to change rate A,- the next time the start of periods denned by 7> and Ti 
coincide. It wiH be the case that foro^> AAij = 0. Values of AAf, are updated to 
reflect user thread (de)activation requests at level i with an inactive primary thread at 
level j. Note also that if there are no primary threads active at rate i t then AAy = OVj. 
The number of threads in aggregate thread n for t = 1, ,„,n. m, = nn(t). 
The k th thread in n, for k — 1, ..^m,-. 
The budget of i<*. Set when f»jt is created. 

The actual execution time of for the current dispatch. If the current dispatch has 
completed then it is the total time that dispatch of U k took to execute. 0 < & k < 0 ik . 
A boolean value indicating ry's activation status. If r, is active, Ei = TRUE otherwise Ei = 
FALSE. This value is maintained at runtime. 

the amount of level 1 aperiodic time consumed in [yi(t)Ti , *]. For simplicity, we denote 
AperiodicTimeiCt) - AperiodicTim^ 

the amount of a leveP t idle time (i.e. time spent . running the idle process) in [yi(t)Ti y t] 
no longer available to slack. For simplicity we denote 3kU«^ft^ -Xdl& L * 
a conservative estimate of the amount of level i idle time that is lost as level * reclaimed 
slack due to sitting idle. 

The amount of slack reclaimed by completing for period at level i in [7i(*)Tt,t}. 

The period identifier for Ti. For i € {1, 2, <yi(t) = Alternatively, one can think 

of 7, as thejdispatch id entifier for n , 7» € {0, 1, H/Ti - 1 }. 

A conservative value of the amount of level k slack available that can be carried over to the next 
period T k . 



CurlD(i) 



USys 



AUSys(L.ft) 



This is associated with the system, and uniquely identifies the period T». Comparisons of 
the form P.ReqlD(t) < CurlD(t) will appear in the algorithms. Sometimes these will be 
abbreviated P.7; < 7,, where uniqueness is understood. See comments in the text about 
counter roll over. 

System utilization allocated to active processes, including pending requests for cre- 
ation/activation and deletion/deactivation. Note that USys does not necessarily reflect 
the current utilization allocated to active processes. 

Changes to the actual process utilization allocated to active processes that will take place 
at the next period boundary of T», at level t. 



»*.•(*) 



The remainder of full Tj periods remaining in the current (relative to t) Ti period. In 
symbols, »;,-(*) = i(( Ti (0 + 1)3* - *)/T;J.- 

The remainder of any unused fixed budgets belonging to ISR threads at rates 1, in 
the interval [t,(7j(<) + 1)2)]. 

The sum total of all fixed budgets belonging to ISR threads at rates 1, j in any Tj 
period. In this release of DEOS, if B(t) is the worst case "aggregate" ISR fixed thread 
budget (at time *, since ISR threads can be killed/created), B){t) = «y|xB(*), a quantity 
that should be easy to maintain at runtime. 



Table (8) 



- Slack Scheduling Notation 



| Notation 


" Description 




UserBudget 

MaxBudget 
Rate 

Active * 

ProcActive 
ReqlD(t) 

n ^ 

* ABudgetReq(i) 


The total amount of time (normalized by the process* primary thread's period) allo- 
cated to active users within the process. UserBudget will never exceed MaxBudget, which 
is the process 5 entire budget* UserBudget reflects any pending changes indictated by 
ABudgetReq. Consequently, UserBudget is not necessarily the current value of the pro- 
cess' budget assigned to user thread. But that value can be computed. 
The process 5 total budget, normalized by the period of its primary thread. The term 
budget is somewhat misleading. Utilization is a more descriptive term. 
The rate at which the highest priority thread (including the process 5 primary thread) runs. 
Note that no user thread of a process p will have a rate higher than the process* primary 
thread. It is TBD whether there is benefit in having a primary thread with rate higher 
than any of its users. Rate takes on one of the values l,...,n, with 1 the highest rate, and 
n the slowest rate. 

A boolean value set to TRUE when the primary thread is active and false when the primary 
thread is inactive. When j>. Active is false, the primary thread's budget is made available 
as timeline slack. 

A boolean value set to TRUE when the process (not just its primary thread) is active, 
otherwise it is FALSE, -i P.ProcActive -> P. Active (regardless of its value). 
This uniquely represents the most recent time a request for user thread (de)activation has 
been made at level t. Note: it is not sufficient to use 7* since these table values are not 
updated "periodically" , but only when other (de)activations take place after the requests 
uovc uct-ii processeo. 

We sometimes denote P.ReqID(») by P.7, where it is understood that P.ji uniquely defines 
the request period T». 

This is the amount of change in allocated budget at level i that either will or did occur 
at time (ReqID,(z) + 1)2;. If the change hasn't yet occurred, subsequent requests might 
change this value. 




Table (9) - Process Record Attributes (Budget Update Vector) 

j! 




iij Notation 


Description 


l\ ComputeTime 
CT 

ExecTime 
ET 

TimeSlice 

TS 
Ei 


The total compute time allocated to the thread. A timeout will be enforced to ensure that 
a thread does not exceed its worst case compute time. 
An abbreviation for ComputeTime. 

The total time spent executing so far. This time is updated at each thread preemption or 
suspension. 

An abbreviation for ExecTime. 

The amount of time a thread is allowed to execute prior to a hardware timeout. Ex- 
amples of timeouts are maximum mutex execution times and maximum available slack 
consumption before thread suspension. 
An abbreviation for TimeSlice. 

A boolean, denoted by Ei for aggregate thread r, which is true if all threads at rate i have 
a true value for CompIetedForltsPeriod and false otherwise. 


ExecutingOnSlack 


A boolean value which is true when a thread's budget current budget has been from taken 
from the slack pool and false when it is a part of its fixed budget. 



Table (10) - Thread State Time Variables 



Notation 


Description 


Slack 


A record perhaps indexed by slack level (depending on the slack consumption algorithms) 
containing the amount of slack reclaimed at level i, and the most recent period Ti during 
which it was reclaimed* 


Slack. 7£ 
Slacks 


The identifier of the most recent Ti period during which level t slack was consumed. 
i € {0, .„ t H/Ti — 1}, This attribute Is not used in the maximal update set of algorithms. 
The amount of slack reclaimed by completing (early) for period at level £ within the 
"current" period defined by 7,-. Slack. Hi is set to zero at every period boundary defined 
byT £ . 

An abbreviation for Slack. 71, , which works only when the slack record is not indexed. 
The amount of unused slack at level £ that has been carried forward at time 7»(i)Ti. 
Slack. Ui is recalculated at every period boundary defined by Ti. 

An abbreviation for Slack. Ui 7 which again works only when the slack record is not indexed. 


ft; 

Slack.*/, 
Ui 


Slack(j) 


The slack record associated with a slack consuming thread (if any) at level j\ In this 
situation, slack made available at the higher rates is allocated directly to high rate slack 
consumers, without taking away (or recalculating) slack previously allocated to low rate 
slack consumers. This record is not used in "trie maximal update set of algorithms. 


Table (11) - Slack Record Attributes 



APPENDIX B - ALGORITHMS 



— Algorithm Update! dleSIackVariables(t: in priority); 

This algorithm updates the idle slack variables used when computing slack availability, 

It is called whenever a periodic task completes* 

— update-time = the worst case time to execute this routine, a constant (perhaps based on t). 

Ei :s= (Ei 4- Ijmod^r; - update the activation status 
idle-timexonsumed := execution Jime(r,) ; 

slack-reclaimed :s= worstjcase-executionJime(r») - idle -time-consumed; 
for j ;= 1, i — 1 loop 

Tj := Ij 4- idlejconsumed + update-time; 
end loop; 

for j := 1, .. M n loop 

Tj := Tj - slack-reclaimed + updatejtime; 
end loop; 



Algorithm (1) - Update Idle Slack Variables 



- Algorithm UpdateApertodtcSiackVariabJes(t: in priority, t : slack consuming thread); 

- This algorithm updates the aperiodic slack variables used when computing slack availability. 

- It is called whenever an aperiodic task completes, which might include surplus compute time for a periodic 

- task increment, or the idle task completing. 

- update-time - the worst case time to execute this routine, a constant {perhaps dependent on tj. 

the aperiodic task t may execute over several time increments, i.e. it may be scheduled, 

consume all slack, suspend itself, be rescheduled when more slack is available, etc. 

slackxonsumed := execution-time-sinceJast scheduling (t); 

fori := li —i* - 1 lo °P 

Tj := + slackjconsumed + update-time; 

end loop; 

for j := t\ loop 

ij := Tj + updatejtime; 

Aj := A 3 + slackjconsumed; 
end loop; 



Algorithm (2) - Update Aperiodic Slack Variables 



— Function AvailabJeS!ack(t: in priority) return time; 

This algorithm calculates the slack available beginning at the time of the call and ending at the 

— end of the period defined by T* f assuming no new threads were created and no existing threads are destroyed. 

slack.calc.time := the worst case time to execute this procedure (perhaps based on t). 
for j := 1, >.. t i — 1 loop 

Xj := Jy-f slack jcalc-iime; 
end loop; 

for j :=s t t n loop * 

Xj Jj+ slack jralc-fcime; 
' s > : =A i(Bi -(>l J +T,); 
end loop; 

slack-available := mini<j< n Sj\ 
return slack-available; 

in practice, return zero if slack-available < cswap time +£; , 

~— updateAperiodicSlackVariabtes should be called prior to execution of this routine, if necessary. 



Algorithm (3) - Available Slack 



Indefinite Timeout Protocol(c : caller; r : resource); 

if not-available (r) then 
if ehasjsuccessors 

then estate := CompleteForPeriod; 

reHaim^lack(p.remaining J^ixedBudget ) ; 
dequeue(c r queue(r )) ; 
else 

if c.ExecutingOnSlack then ebudget jremaining :=x available.slack(erate); end if; 
if ebudget remaining < queuejtime(c) 

then estate :s= ComptetedForPeriod; 

— slack reclamation may not be worth it here 

else 

enqueue(c t queue(r)); 
if eSlack and SlackOn 

thenir^claim-slack^.remainmgJ^ixedBudget - cresourceJ.ime(r)); 
estate Passively Wait ingForE vent; 
Predecrement slack accumulators by eresource-time(r) ; 
else 

estate :=r ActivelyWaitingForEvent; 

This type of wait introduces effective blocking* 

end if; 
end if; 
end if; 
else 

if c.ExecutingOnSlack then ebudget .remaining := availablejslack( crate); end if; 
if c. budget .remaining < resource J;ime(r) 
then estate :=s CompletedForPeriod; 

release(r); dequeue(c,queue(r)); 
else continue the execution of c with resource r available; 

,Slack\accumulators need to be predecremented if c is executing on slack and r is a mutex. 

end if; 
end if; 



Algorithm (4) - Indefinite Timeout Protocol for a Resource Wait 



Long Duration Timeout Protocol(c ; caller; r ; resource; num Jter : natural); 

if not^available(r) then 
if num Jter = max iter 

then dequeue(c,queue(r); return; 
else num Jter := num Jter -f 1; 
end if; 

if ehas^successors 

then estate Complete ForPeriod; 
£ |T^<^rn-siack( eremainingJ?ixedBudget); 
olequeue^c.f); - At the next start of c's next period, c will be moved to r's queue by DEOS 
else 

if cJExecutingOnSiack then ebudget remaining := available j>lack( crate); end if; 
if ebudget remaining < queue-time (c) 

then estate := CompletedForPeriod; 

slack reclamation may not be worth it here 

else 

enqueue(c t queue(r)); 
if ;eSfack and SlackOn 

then reclaim^lackfc.remainingJPixedBudget - eresotirceJtime(r)); 
estate PassivelyWaitingForEvent; 
Predecrement slack accumulators by eresource.time(r); 
else 

estate Actively WaitmgForEvent; 

This type of wait introduces effective blocking. 

end if; 
end if; 
end if; 
else 

if eExecutingOnSlack then ebudget jremaining := available^lack(erate); end if; 
if ebudget remaining < resource-time(r) 
then estate := CompletedForPeriod; 

release(r); dequeue(e,queue{r)); 
else continue the execution of c with resource r available; 

— Slack accumuiat ore need, to be predecremented if c is executing on slack and r is a mutex. 
end if; 
end if; 



Algorithm (5) - Long Duration Timeout Protocol for a Resource Wait 



Short Duration Timeout Protocol(c : caller; r : resource); 



while c.priority <~ readyJthread.(irmerited)priority 

wait; — — higher or equal priority threads are running 
end while; 

c is at the head of queue (r) 

if not-available (r ) 
then 

return timeout status to c; dequeue(c,queue(r)); 
estate := CompIetedForPeriod; 
else 

case retype is 

when r =s event => continue the execution of c with event r pulsed; 
when r = mutex zz> grant c the lock to mutex r; 

when c is executing on slack, predecrement the slack accumulators 

when r = semaphore => c calls wait(r); 
end case; 
end if; 

Algorithm (6) - Short Duration Timeout Protocol for a Resource Wait 

— Algorithm System InitiatizationOfSlackVariables; 

— This algorithm is called once before the start of the initial hyperperiod. 

— Failure to initialize slack variables at this time will result in bogus values later. 

— This algorithm requires modifications when primary thread periods can be other than T\ . 

8; 

<:=:0; Co:=0; 

for each process P in the registry loop 
calculate/read P's budget, C P ; 

P.UserBudget := 0; RMaxBudget := C P ; P-Rate 1; 

P.ReqID := (0,0,. „,0); RABudgetReq :=s (0,0 t .,.,0); ~ vectorsof n zeroes. 

Most likey, if P.Proc Active, then P. Active will be assumed at system startup? 

if P.Proc Active then 

if R Active then — P's primary -thread is active 

then ( 0 := Co + ( P ; 
else C :s £ + < p ; Z := Z U {P} ; 
end if; 
end if; 
end loop; 

for i :— 1, .«.,n loop 

Ti := the period of the % th smallest rate declared in the system; 
Ai :=: 0;C7,- ;= execution time of 
AUsys(i) 0; 
for j := 1, .. M t loop 

n iy := T./Tj; AA< tj := 0; ""i 
— ( n t|j)> (AA'j) are diagonal matrices, 
end loop; 
end loop; 

:=ri-(c + Co + tf»); 

Aj ;= system level slack =s budget not assigned to active processes minus system blocking time 

USys := (C + Co)/2i; 



Algorithm (7) - System Initialization of Slack Variables 



— Algorithm PenodUpdateOfSlackVariables(j : in rate); 

— This algorithm is called at the start of every period. That is at times 0,Ty, 2Ty» 

— This algorithm is called once at the largest period. That is t the start of a period for Ty 

— is also the start of a period for T k when k < j. 

— r indexes the rates at which primary periods are supported. 

— In the current release of DEOS, r = 1, always, so this is an 0(n) routine. ' 

— When thread (de)activations occured, update changes in dynamic period timeline slack, 
Ove may have to introduce process sets with indices for their primary threads. 

Z := Z'; Z 1 :~ Z; 
for k := l.J loop 

V k is a conservative amount of level h slack available and not used in the last T k period that can be carried over. 
Not all of 71 k can be attributed to U k but can safely be assigned to U n - 
U k U k + max(0, (A* - {A k + I fc )); 
U n :=U n +7l k ; 

T k :~ 0; A k := 0; 1l h := 0; C k := 0; 
E k := FALSE; 7* := 7fc + 1; 
AUsys(Jb) :ss 0; 
or := 0; 

In this release of DEOS, the loop here is simply A k :=s A k -f Ylr^i ^^ r * 

and then zero out the AAi r entries. 

for r := k..j loop 
:s=<r + dAjt r ; 
AA fcr ;= 0; 
end loop; 
A* := A* + <r; 
end loop; 

if j s= n then we are at the hyperperiod, reset the period id's and unconsumed slack. 

for k := l„n loop 
•Yfc '= 0; 

end loop; 
end if; 



Algorithm (8) - Period Update of Slack Variables 



- Algorithm PrimaryThread( Deactivation (P : process); 

— If P.active, then deactivate P's primary thread else activate P's primary thread. 

~ (De)activation request "processing" time is at s y where *y r T r < s < (y r + l)T r , with r as P.rate. 

Notation used defined below and is the same as that above. 

n j\r = 2j/T r . 

r :=s P.rate; 

There may be some pending requests for activations/deactivations that will not be in effect at time (^y r (s) -f l)T r * 

for j irs r..n loop 

if RABudgetReqQ) > 0 and then CurID(j) > P.ReqID(j) then 

These updates have already occurred. Zero them out. 

RABudgetReq(j) := 0; P.ReqID(j) 0; ' 
end if; 

if (CurlDQ) = RReqID(j) and ((7; + l)Tj > (y r + 1)2V)) then 

RUserBudget ;= RUserBudget - ABudgetReq(j)/nj| r ; 

ABudgetReq(jf) is left unchanged for later updates. 

end if; 

if P,Active then 

AArr := AA rr - (RMaxBudget - RUserBudget)T r ; 
else; 

AArr := AArr 4- (RMaxBudget - RUserBudget)T r ; 
end if; 
end loop; 

if P.Active then P.Active := FALSE else RActive := TRUE; end if; 



Algorithm (9) - Updates for Primary Thread (Deactivation Requests 



— Algorithm UserThread(De)Activation(£: time; j rate; P: process; activation : boolean); 

— P is the process of the thread being (de)activated. 

— j is the rate of the thread for which (de)activation is being requested. 

— $ is +/- the budget of the thread (in time, not utilization) requesting de/activation. 

— I.e. S < 0 the call is for a deactivation request, and S > 0 the call is for an activation request. 

— activation is a boolean, which is actually redundant information given 6'$ sign. 

— Can we admit a new thread at level j? 

— (De)activation request time is at s, where 7jTj < s < (7j + l)Tj. 

— This assumes that deactivations have at most a one period delay, which is coming soon. 

— The execution of this code is at time s, with period boundary code executed at time (^j + l)Tj* 



Notation used defined below. 

- ~ nj| h = TjfT h . 

r := P.rate; P's primary thread's rate* 

CurED(j) is similar to *yj t except it must uniquely identify which period Tj we are in since 

P.CurlD might not have been updated for many hyperperiods, hours, or since system boot. 

for t := 1, * M n loop 

if P ABudgetReq(j) / 0 then 

if CurlD(t) > P.ReqlD(t) or RReqlD(i) - CurlD(i) > n n{1 then 
P.ReqlD(t) := 0; P, ABudgetReq(t) := 0; 

These updates have already been made. Zero them out. 

end if; 
end if; 
end loop; 

If an activation check for feasibility, and if feasible readjust the compute times within the process. 

if activate then 

UserBudget :=P. User Budget; 

for i := j + l.-n loop 

UserBudget UserBudget - min(0,P.ABudgetReq(i)); 

end loop; 

if UserBudget +6fTj > PMaxBudget 
then 

reject the activation request on the grounds of infeasibility; 
return; 
end if; 
end if; 

P.UserBudget := P.UserBudget + S/T j; 

P.ReqlD(t) := PCurID(»');P.ABudgetReq := P.ABudgetReq* 6/T j; 
if not P. Active then 

AA r j :=r AA r j +6/n jir ; 

Here is where we would update AC rj if aggregate threads are used. 

-end if; 



Algorithm (10) - Updates for User Thread (Deactivation Requests 



- Algorithm Process(De)activation(P : process, r : rate; activate ; boolean); 

- This request is made at time U If granted, it will become effective at time (-yr(t) + l)T r where r := F.Rate; 

C p ;= the worst case compute time of P measured every T r time units. (This would be input in a create.) 
if activate 

if PProcActive then return either an with error or as a no-op; end if; P is already active. 

Determine whether activating P will result in a feasible process set. 

SysBud SysU; 

for i := r + 1, loop 

SysBud := SysBud - nun(0, ASys(i)); 
end loop; 

if SysBud +C p fT r >1-U B then 

reject activation request; return; — infeasible 

end if; 

Activation, is feasible 

P,Rate := r; P.Active := TRUE; RProcActive := TRUE; 
P.MaxBudget := < p ; RUserBudget :» 0; 
PrimaryThreadActivation(P); 
ASys{r) ;= ASys(r) 4- < P /T r ; 
else a deactivation request which have no feasibility test 

if P.UserBudget ^ 0 then return error; end if; 
PwnaryThreadDeactivation(P); 
P.ProcActive := FALSE; 
ASys(r) ;= ASys(r) - ( V /T r ; 
end if-then-else; 

This is another place where the AC matrix is updated, and also Z*. 

letter Wtey ttf* b^Wflfci wlien aU processes are assumed to be declared statically. 



Algorithm (1 1) - Process (Deactivation 



Algorithm UpdateReclainiedSlack^*; in priority); 

This algorithm updates the reclaimed slack variables used when computing slack availability. 

It is called whenever a task executing on fixed budget completes for period: 

The same algorithm applies whether doing incremental or aggregate updates. 



if r, has completed then 

slack-reclaimed := ComputeTime(Ti)- ExecTime(r,) - updateJirae; 

updateJtime is the time to execute this code 

TZi :~ 1Zi+ max(0,slack-reclaimed- £{); 
end if; 



Algorithm (12) - Update Reclaimed Slack Variables 



— Algorithm UpdateldleSlacfcVariables; 

This algorithm updates the idle slack variables used when transitioning from busy to 

— It is called whenever when the idle task completes (at priority (n+1)). 
Le. the idle process is denoted by r^+i . 

update -time = the worst case time to execute this routine. 



idlejtime := ExecTime(r n +i); 

The assumption for DEOS is that idle-time < T 2 . 

To relax that assumption would require more bookkeeping. 

j := l; 

while idlejtime > 0 and j < n loop OA # T \ 

if idle Jtirae< slack^vailable then ^ M ^ 

Xj := Jj-f idlejtime; idle-time := 0; 
end if; 

Cj is denned as the worst case compute time, but can be reduced 

to the worst case amount of time threads at level j can wait for a resource 

and not give up their time to the slack. 

la DEOS, as I understand it, this is only ISR threads which run at rate 1. 

I believe the algorithm works for threads that can wait for resources while holding budgets, 

— I also think under these conditions, it is suboptimal. 

if slack-available < idlejtime and idlejtime < (Aj + Uj + Cj) then 

Xj := Jj-f slack-available; 

Cj Cj+ (idle-time - slack-available); 

idle-time 0; 
end if; 

if idle-time > (Aj -f Uj + Cj) then 
Xj := Xj + slack-available; 
Cj ;= Cj + (Aj + Uj + Cj)- slack-available; 
idle_time := idlejtime - (Aj + Uj + Cj)\ 
end if; 
end loop; 



Algorithm (13) - Update Idle Slack Variables 

— Algorithm UpdateAperiodfcSlackVariables{t: in priority, t : slack consuming thread); 

This algorithm updates the aperiodic slack variables used when computing slack availability. 

It is called whenever an aperiodic task completes, which might include surplus compute time for a periodic 

— task increment, or the idle task completing. 

updateJtime = the worst case time to execute this routine, a constant (perhaps dependent on *)* 



the aperiodic task t may execute over several time increments, i.e. it may be scheduled, 

consume all slack, suspend itself, be rescheduled when more slack is available, etc. 

slackxonsumed := executionJtime^inceJast-scheduling(t) *f update-time; 

while slack -consumed > 0 loop 

Ijs := min(slackxonsumed 3 max((A,- + Uj + Uj) - (Xj -f Aj+ slackxonsumed) ,0)); 
slackxonsumed slackxonsumed — ljs; 
Aj := Aj + ljs; 

j x= i + 1; 

end while; 



Algorithm (14) - Update Aperiodic Slack Variables 



Function AvailableSlack return an n-vector of slack time = (5(1), 5(2), S(n)); 

This algorithm calculates the slack available beginning at the time of the call, say 5 and ending at the 

ends of periods defined by ((71 (*) + (72^) + l)T 2) ».,(-**(*) + l)T n ). 

Note that more period timeline slack may become available in these intervals after this request. 

This differs significantly from the original slack stealer. 

Note the difference in fonts for A; and Ai* They are different variables. 



slackxak-time := the worst case time to execute this procedure; 
S v := 0; 

for j := l..n loop 

S := {Aj + 7lj + U } ) - (Aj + 1;+ slackjcalcjtime); 
Su := 5c; 4- S; 

if Sj/ < 2(cswap -f S) -f cachebonus 

then Sj := 0; 

else <Sy := Sjj] 
end if; 
end loop; 

returner: (Si ,^2, ... t 5n); 

in practice, if the slack available at any level is too small to cover the cost of context swaps , 

plus other overhead, using it causes a negative effect. 

— 8 and cacheBonus is selected based on system overheads beyond cswaps. 

UpdateAperiodicSiackVariables should be called prior to execution of this routine, when necessary. 

UpdateldleSlackVariables will have automatically be called'prior to exection of this routine. 



Algorithm (15)- AvailableSlack 



